Hi,
Jon Armitage wrote:
-Original Message-
From: Anthony Peacock [mailto:[EMAIL PROTECTED]
Sent: 13 February 2007 15:56
To: SpamAssassin Users
sa-update updates the stock rules that are distributed with
SA. Rules Du Jour is used to update add-on rulesets like the
SARE rules.
If yo
> I didn't want to cloud the situation, as we were progressing
> in very small steps in improving the scoring of the OPs SA.
> As he was already using RDJ for the SARE rules I thought the
> easiest first step would be to get sa-update set up for the
> default ruleset and then once the OP was h
Matt Kettler wrote:
Received: by mail.mydomain.com (Postfix) id EFBE62E48F; Wed, 7 Feb
2007 12:57:43 + (GMT)
Nice.. A Received: header with no from clause.
I'm glad you like it, though I don't think I can take all the credit...
this is generated by an almost vanilla (Gentoo) Post
hi Raul --
I think you are on the right track with this approach. Note also that you
can give it a better syntax, looking more like a new rule type -- see the
MIMEHeader plugin for an example. So for instance instead of
#get the rdns
header _RM_RELAY_RDNS eval:remember_me_header('rdns', \
Matt Kettler writes:
> Steve [Spamassassin] wrote:
> > Justin Mason wrote:
> >> could you post an example of your config and the message you're testing
> >> with, in full?
> > OK in /etc/mail/spamassassin/local.cf
>
> > Received: by mail.mydomain.com (Postfix) id EFBE62E48F; Wed, 7 Feb
> > 2
Content analysis details: (8.6 points, 7.0 required)
pts rule name description
--
--
2.4 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
[SPF failed: Please see
http://www.openspf.org/
On Wednesday 14 February 2007 14:55, maillist wrote:
> Content analysis details: (8.6 points, 7.0 required)
>
> pts rule name description
> --
> --
> 2.4 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF rec
Hi there!
Is there a way to convince spamassassin to read the *user_prefs* file
not from ~/.spamassassin/ but let's say /var/mail//.spamassassin/ ?
I use sendmail with spamassassin milter, whereby spamass-milter starts
with -u defaultuser
Thanks in advance!
Alex
Magnus Holmgren wrote:
On Wednesday 14 February 2007 14:55, maillist wrote:
Content analysis details: (8.6 points, 7.0 required)
pts rule name description
--
--
2.4 SPF_HELO_SOFTFAIL SPF: HELO does
Alex Thor wrote:
> Hi there!
>
> Is there a way to convince spamassassin to read the *user_prefs* file
> not from ~/.spamassassin/ but let's say
> /var/mail//.spamassassin/ ?
>
> I use sendmail with spamassassin milter, whereby spamass-milter starts
> with -u defaultuser
>
> Thanks in advance!
> A
On Wed, 2007-02-14 at 15:44 +0100, Alex Thor wrote:
> Hi there!
>
> Is there a way to convince spamassassin to read the *user_prefs* file
> not from ~/.spamassassin/ but let's say /var/mail//.spamassassin/ ?
You are looking for @default_userprefs_path and @default_userstate_dir
in SpamAssassin.
Hi there!
Is there a way to convince spamassassin to read the *user_prefs* file
not from ~/.spamassassin/ but let's say /var/mail//.spamassassin/ ?
I use sendmail with spamassassin milter, whereby spamass-milter starts
with
-u defaultuser
Thanks in advance!
Alex
Hi,
I have been getting a lot of spam messages as indicated in the content
preview below.
"""
Content preview: ENERGY COMPANY ALERT!! Search for: UTEVCurrent price:
$0.016 Market: bullish!!! TRADE SMART AND WIN WITH US NOW!! [...]
Content analysis details: (7.1 points, 5.0 required)
pts rul
On Wed, Feb 14, 2007 at 02:43:14PM +, Michael Connors wrote:
> Content analysis details: (7.1 points, 5.0 required)
>
> 0.1 RCVD_BY_IP Received by mail server with no name
> 1.7 SARE_MLB_Stock1BODY: SARE_MLB_Stock1
> 1.7 SARE_PROLOSTOCK_SYM3 BODY: Last week's hot stock s
Onsdag 14 februar 2007 20:16, skrev Theo Van Dinter:
> On Wed, Feb 14, 2007 at 08:09:44PM +0100, Dag Ringdal wrote:
> > > > [25234] dbg: dns: query failed: 7.1.3.updates.spamassassin.org =>
> > > > NOERROR
> > >
> > > In your case, you got a DNS error... I'd get that problem fixed, and
> > > then
Tirsdag 13 februar 2007 19:15, skrev Theo Van Dinter:
> On Tue, Feb 13, 2007 at 06:37:23PM +0100, Dag Ringdal wrote:
> > I care about the rules as well. Where can I find whether the lastest
> > rules is updated and in use?
> >
> > [25234] dbg: dns: query failed: 7.1.3.updates.spamassassin.org => NO
Michael Connors wrote:
Hi,
I have been getting a lot of spam messages as indicated in the content
preview below.
"""
Content preview: ENERGY COMPANY ALERT!! Search for: UTEVCurrent price:
$0.016 Market: bullish!!! TRADE SMART AND WIN WITH US NOW!! [...]
Content analysis details: (7.1 poi
On Wed, Feb 14, 2007 at 08:09:44PM +0100, Dag Ringdal wrote:
> > > [25234] dbg: dns: query failed: 7.1.3.updates.spamassassin.org => NOERROR
> > In your case, you got a DNS error... I'd get that problem fixed, and then
> > you'd see something like:
> > [8572] dbg: channel: metadata version = 50392
Bahram Fahnestock wrote:
Hi,
Save over 50% on your medication
http://www.ledrx .com
Remove space in the above link
Christmas, but... well, I expect youre all going to want to stay at
Hogwarts, what with... one thing and another.
Mum! said Ron irritably. What dyou three know that we dont?
According to Matt Kettler:
> 9 times out of 10, this is caused by someone who's calling SA at the MTA
> layer, but they're trying to use the user_prefs in the recipients home
> directory.
>
> SA has no reliable way to determine who the recipient is, given the
> content of the message it receives.
Apache SpamAssassin 3.1.8 is now available! This is a maintenance and
security release of the 3.1.x branch. It is highly recommended that
people upgrade to this version.
Downloads are available from:
http://spamassassin.apache.org/downloads.cgi?update=200702131100
The release file will also
Ugh!
http://www.pbp.net/~jnichols/spam2.txt
I've been getting absolutely hammered with these spams. I had over 50 in
my inbox this morning.
Any rulesets to deal with them? They're scoring lower and lower all the
time. The one I linked to scored -2 :-(
Jonathan Nichols wrote:
Any rulesets to deal with them? They're scoring lower and lower all the
time. The one I linked to scored -2 :-(
It looks like it tripped BAYES_00. Have you been running these through
sa-learn as spam? That should help, to start.
--
Kelson Vibber
SpeedGate Communicat
On 02/14/07 Jonathan wrote:
> http://www.pbp.net/~jnichols/spam2.txt
0.0 BOTNET_NORDNS IP address has no PTR record
0.1 HTML_50_60 BODY: Message is 50% to 60% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5002]
5.0
From: Maciej Friedel [mailto:[EMAIL PROTECTED]
>
> On 02/14/07 Jonathan wrote:
>
> > http://www.pbp.net/~jnichols/spam2.txt
>
> 0.0 BOTNET_NORDNS IP address has no PTR record
> 0.1 HTML_50_60 BODY: Message is 50% to 60% HTML
> 0.0 HTML_MESSAGE BODY: HTML included in message
> 1.0 BAYES_50
On Thu, 15 Feb 2007 01:18:46 +0100, Giampaolo Tomassoni wrote:
> I think SARE and some network tests are even better (scores 11.5 with
> my surprising Bayes :)
I agree, mine scored it in a similar way:
Content analysis details: (11.5 points, 4.9 required)
pts rule name descripti
From: Quinn Comendant [mailto:[EMAIL PROTECTED]
>
> On Thu, 15 Feb 2007 01:18:46 +0100, Giampaolo Tomassoni wrote:
> > I think SARE and some network tests are even better (scores 11.5 with
> > my surprising Bayes :)
>
> I agree, mine scored it in a similar way:
>
> Content analysis details: (
I have being getting a lot of this in my logs:
Feb 14 21:55:13 s spamd[7249]: dkim: invalid DKIM-Signature: invalid
(unsupported protocol)
at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Plugin/DKIM.pm line
339, line 390
Is this something I should worry about?
AFAIS, it is related to broken
On Feb 14, 2007, at 8:48 PM, Giampaolo Tomassoni wrote:
From: Quinn Comendant [mailto:[EMAIL PROTECTED]
On Thu, 15 Feb 2007 01:18:46 +0100, Giampaolo Tomassoni wrote:
I think SARE and some network tests are even better (scores 11.5
with
my surprising Bayes :)
I agree, mine scored it in a
On Thu, 15 Feb 2007 02:48:44 +0100, Giampaolo Tomassoni wrote:
> Nah! You cheat! Bayes did already learn this message, right? :)
;DDD
Not intentionally... but we use bayes_auto_learn, so maybe it found it already.
Here's an idea for fun: run a "who scores the highest" competition. Put online
50
i note in 'Changes',
r503835 | felicity | 2007-02-05 19:30:00 + (Mon, 05 Feb 2007) | 1 line
bug 5240: disable plugins by default via sa-update unless new
--allowplugins option is specified
though i read the sa-update manpage, & read the commit here,
http://www.gossamer-threads.com/lists/s
On Wed, Feb 14, 2007 at 06:48:05PM -0800, snowcrash+spamassassin wrote:
> though i read the sa-update manpage, & read the commit here,
> and, found nothing on the wiki, i'm unclear.
The man page is pretty straightforward IMO.
> can someone explain why this is important? what it does do for me?
Here is a one I've been getting.. I use a older version of spambot, SARE,
and Network tests.. to no avail..
http://www.pastebin.ca/356543
- Original Message -
From: "Brian Wilson" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, February 14, 2007 9:37 PM
Subject: [SPAM] Re: New stock spam (
Scored very highly for me
Content analysis details: (19.0 points, 5.0 required)
pts rule name description
--
--
5.0 BOTNET Relay might be a spambot or virusbot
[botnet0.7,ip=211.48.218.
The man page is pretty straightforward IMO.
sigh.
ok.
as it's clear to one of the developers (!), it _must_ just be me, then. ;-)
> do i need to change it to not 'lose' any capability?
it depends on the channels you were using. it doesn't change anything
for the official SA channel. YMMV
On Wed, Feb 14, 2007 at 08:09:57PM -0800, snowcrash+spamassassin wrote:
> since i certainly trust the project, and DOS' contributions, should i
> simply mod my cron jobs to,
> sa-update --allowplugins --channelfile .../DIST-channels.conf
> sa-update --allowplugins --channelfile .../SAR
So I've got a message
who's body is quoted printable as in chinese
but this method
sub check_for_faraway_charset {
my ($self, $body) = @_;
my $type = $self->get('Content-Type');
my @locales = $self->get_my_locales();
return 0 if grep { $_ eq "all" } @locales;
$type = get_charset_f
Maciej Friedel wrote:
On 02/14/07 Jonathan wrote:
http://www.pbp.net/~jnichols/spam2.txt
0.0 BOTNET_NORDNS IP address has no PTR record
0.1 HTML_50_60 BODY: Message is 50% to 60% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_50 BODY: Bayesian spam probability is 40 to 6
hi,
I would say you should add allowplugins if and only if the following
three conditions hold:
this is a helpful -- but very subjective -- approach.
1) You trust the channel provider is not malicious
well, as in the case if the Project itself, and DOS, y'all _are_ 'nice
folks', 'n all.
45.7kb of it, and the only font I recognized was the ones calling out the
font for the next section. I presume it was Farsi or something like it.
It must have had 500 addresses in the To: and Cc: lines.
Anybody else getting this crap?
--
Cheers, Gene
"There are four boxes to be used in defens
At 03:43 PM 2/14/2007, Jonathan Nichols wrote:
Ugh!
http://www.pbp.net/~jnichols/spam2.txt
I've been getting absolutely hammered with these spams. I had over
50 in my inbox this morning.
Any rulesets to deal with them? They're scoring lower and lower all
the time. The one I linked to scored
maillist wrote:
> Bahram Fahnestock wrote:
>> Hi,
>>
>> Save over 50% on your medication
>>
>> http://www.ledrx .com
>>
>> Remove space in the above link
>>
>>
>>
>> Christmas, but... well, I expect youre all going to want to stay at
>> Hogwarts, what with... one thing and another. Mum! said Ron
>
As I could see, strange comments in GIF images results often in problems
in further processing. Now I want to say to my config: "when converting
a GIF image, pass it to 'gifsicle --no-comments' at first. How can I add
this wish to my config ?
Thanks a lot !
Claude
--
You will find the CA certi
On Thu, February 15, 2007 03:21, Raul Dias wrote:
> I have being getting a lot of this in my logs:
> Feb 14 21:55:13 s spamd[7249]: dkim: invalid DKIM-Signature: invalid
> (unsupported protocol)
> at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Plugin/DKIM.pm line
> 339, line 390
you have th
On Wed, 14 Feb 2007 22:41:45 -0500, Billy Huddleston wrote:
> Here is a one I've been getting.. I use a older version of spambot,
> SARE, and Network tests.. to no avail..
>
> http://www.pastebin.ca/356543
I get...
Content analysis details: (13.4 points, 4.9 required)
pts rule name
45 matches
Mail list logo
